Invalidate existing HSTS headers

Fixes #1704